深入理解Fabric环境搭建的详细过程(转)
前面的準(zhǔn)備工作我就不用多說(shuō)了,也就是各種軟件和開(kāi)發(fā)環(huán)境的安裝,安裝好以后,我們git clone下來(lái)最新的代碼,并切換到v1.0.0,并且下載好我們需要使用的docker鏡像,也就是到步驟6,接下來(lái)我們要解析的是之后的步驟,也就是真正的搭建Fabric的過(guò)程。
1.生成公私鑰和證書(shū)
Fabric中有兩種類(lèi)型的公私鑰和證書(shū),一種是給節(jié)點(diǎn)之前通訊安全而準(zhǔn)備的TLS證書(shū),另一種是用戶(hù)登錄和權(quán)限控制的用戶(hù)證書(shū)。這些證書(shū)本來(lái)應(yīng)該是由CA來(lái)頒發(fā),但是我們這里是測(cè)試環(huán)境,并沒(méi)有啟用CA節(jié)點(diǎn),所以Fabric幫我們提供了一個(gè)工具:cryptogen。
1.1編譯生成cryptogen
我們既然獲得了Fabric的源代碼,那么就可以輕易的使用make命令編譯需要的程序。Fabric官方提供了專(zhuān)門(mén)編譯cryptogen的入口,我們只需要運(yùn)行以下命令即可:
cd ~/go/src/github.com/hyperledger/fabric make cryptogen運(yùn)行后系統(tǒng)返回結(jié)果:
build/bin/cryptogen CGO_CFLAGS=" " GOBIN=/home/studyzy/go/src/github.com/hyperledger/fabric/build/bin go install -tags "" -ldflags "-X github.com/hyperledger/fabric/common/tools/cryptogen/metadata.Version=1.0.0" github.com/hyperledger/fabric/common/tools/cryptogen Binary available as build/bin/cryptogen也就是說(shuō)我們?cè)赽uild/bin文件夾下可以看到編譯出來(lái)的cryptogen程序。
1.2配置crypto-config.yaml
examples/e2e_cli/crypto-config.yaml已經(jīng)提供了一個(gè)Orderer Org和兩個(gè)Peer Org的配置,該模板中也對(duì)字段進(jìn)行了注釋。我們可以把Org2拿來(lái)分析一下:
- Name: Org2 Domain: org2.example.com Template: Count: 2 Users: Count: 1Name和Domain就是關(guān)于這個(gè)組織的名字和域名,這主要是用于生成證書(shū)的時(shí)候,證書(shū)內(nèi)會(huì)包含該信息。而Template Count=2是說(shuō)我們要生成2套公私鑰和證書(shū),一套是peer0.org2的,還有一套是peer1.org2的。最后Users. Count=1是說(shuō)每個(gè)Template下面會(huì)有幾個(gè)普通User(注意,Admin是Admin,不包含在這個(gè)計(jì)數(shù)中),這里配置了1,也就是說(shuō)我們只需要一個(gè)普通用戶(hù)User1@org2.example.com 我們可以根據(jù)實(shí)際需要調(diào)整這個(gè)配置文件,增刪Org Users等。
1.3生成公私鑰和證書(shū)
我們配置好crypto-config.yaml文件后,就可以用cryptogen去讀取該文件,并生成對(duì)應(yīng)的公私鑰和證書(shū)了:
cd examples/e2e_cli/ ../../build/bin/cryptogen generate --config=./crypto-config.yaml生成的文件都保存到crypto-config文件夾,我們可以進(jìn)入該文件夾查看生成了哪些文件:
tree crypto-config2.生成創(chuàng)世區(qū)塊和Channel配置區(qū)塊
2.1編譯生成configtxgen
與前面1.1說(shuō)到的類(lèi)似,我們可以通過(guò)make命令生成configtxgen程序:
cd ~/go/src/github.com/hyperledger/fabricmake configtxgen運(yùn)行后的結(jié)果為:
build/bin/configtxgen CGO_CFLAGS=" " GOBIN=/home/studyzy/go/src/github.com/hyperledger/fabric/build/bin go install -tags "nopkcs11" -ldflags "-X github.com/hyperledger/fabric/common/configtx/tool/configtxgen/metadata.Version=1.0.0" github.com/hyperledger/fabric/common/configtx/tool/configtxgen Binary available as build/bin/configtxgen2.2配置configtx.yaml
官方提供的examples/e2e_cli/configtx.yaml這個(gè)文件里面配置了由2個(gè)Org參與的Orderer共識(shí)配置TwoOrgsOrdererGenesis,以及由2個(gè)Org參與的Channel配置:TwoOrgsChannel。Orderer可以設(shè)置共識(shí)的算法是Solo還是Kafka,以及共識(shí)時(shí)區(qū)塊大小,超時(shí)時(shí)間等,我們使用默認(rèn)值即可,不用更改。而Peer節(jié)點(diǎn)的配置包含了MSP的配置,錨節(jié)點(diǎn)的配置。如果我們有更多的Org,或者有更多的Channel,那么就可以根據(jù)模板進(jìn)行對(duì)應(yīng)的修改。
2.3生成創(chuàng)世區(qū)塊
配置修改好后,我們就用configtxgen 生成創(chuàng)世區(qū)塊。并把這個(gè)區(qū)塊保存到本地channel-artifacts文件夾中:
cd examples/e2e_cli/../../build/bin/configtxgen -profile TwoOrgsOrdererGenesis -outputBlock ./channel-artifacts/genesis.block2.4生成Channel配置區(qū)塊
../../build/bin/configtxgen -profile TwoOrgsChannel -outputCreateChannelTx ./channel-artifacts/channel.tx -channelID mychannel另外關(guān)于錨節(jié)點(diǎn)的更新,我們也需要使用這個(gè)程序來(lái)生成文件:
../../build/bin/configtxgen -profile TwoOrgsChannel -outputAnchorPeersUpdate ./channel-artifacts/Org1MSPanchors.tx -channelID mychannel -asOrg Org1MSP../../build/bin/configtxgen -profile TwoOrgsChannel -outputAnchorPeersUpdate ./channel-artifacts/Org2MSPanchors.tx -channelID mychannel -asOrg Org2MSP最終,我們?cè)赾hannel-artifacts文件夾中,應(yīng)該是能夠看到4個(gè)文件。
channel-artifacts/
├── channel.tx
├── genesis.block
├── Org1MSPanchors.tx
└── Org2MSPanchors.tx
3.配置Fabric環(huán)境的docker-compose文件
前面對(duì)節(jié)點(diǎn)和用戶(hù)的公私鑰以及證書(shū),還有創(chuàng)世區(qū)塊都生成完畢,接下來(lái)我們就可以配置docker-compose的yaml文件,啟動(dòng)Fabric的Docker環(huán)境了。
3.1配置Orderer
Orderer的配置是在base/docker-compose-base.yaml里面,我們看看其中的內(nèi)容:
orderer.example.com: container_name: orderer.example.com image: hyperledger/fabric-orderer environment: - ORDERER_GENERAL_LOGLEVEL=debug - ORDERER_GENERAL_LISTENADDRESS=0.0.0.0 - ORDERER_GENERAL_GENESISMETHOD=file - ORDERER_GENERAL_GENESISFILE=/var/hyperledger/orderer/orderer.genesis.block - ORDERER_GENERAL_LOCALMSPID=OrdererMSP - ORDERER_GENERAL_LOCALMSPDIR=/var/hyperledger/orderer/msp # enabled TLS - ORDERER_GENERAL_TLS_ENABLED=true - ORDERER_GENERAL_TLS_PRIVATEKEY=/var/hyperledger/orderer/tls/server.key - ORDERER_GENERAL_TLS_CERTIFICATE=/var/hyperledger/orderer/tls/server.crt - ORDERER_GENERAL_TLS_ROOTCAS=[/var/hyperledger/orderer/tls/ca.crt] working_dir: /opt/gopath/src/github.com/hyperledger/fabric command: orderer volumes: - ../channel-artifacts/genesis.block:/var/hyperledger/orderer/orderer.genesis.block - ../crypto-config/ordererOrganizations/example.com/orderers/orderer.example.com/msp:/var/hyperledger/orderer/msp - ../crypto-config/ordererOrganizations/example.com/orderers/orderer.example.com/tls/:/var/hyperledger/orderer/tls ports: - 7050:7050這里主要關(guān)心的是,ORDERER_GENERAL_GENESISFILE=/var/hyperledger/orderer/orderer.genesis.block,而這個(gè)創(chuàng)世區(qū)塊就是我們之前創(chuàng)建的創(chuàng)世區(qū)塊,這里就是Host到Docker的映射:
? - ../channel-artifacts/genesis.block:/var/hyperledger/orderer/orderer.genesis.block
另外的配置主要是TL,Log等,最后暴露出服務(wù)端口7050。
3.2配置Peer
Peer的配置是在base/docker-compose-base.yaml和peer-base.yaml里面,我們摘取其中的peer0.org1看看其中的內(nèi)容:
peer-base: image: hyperledger/fabric-peer environment: - CORE_VM_ENDPOINT=unix:///host/var/run/docker.sock # the following setting starts chaincode containers on the same # bridge network as the peers # https://docs.docker.com/compose/networking/ - CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE=e2ecli_default #- CORE_LOGGING_LEVEL=ERROR - CORE_LOGGING_LEVEL=DEBUG - CORE_PEER_TLS_ENABLED=true - CORE_PEER_GOSSIP_USELEADERELECTION=true - CORE_PEER_GOSSIP_ORGLEADER=false - CORE_PEER_PROFILE_ENABLED=true - CORE_PEER_TLS_CERT_FILE=/etc/hyperledger/fabric/tls/server.crt - CORE_PEER_TLS_KEY_FILE=/etc/hyperledger/fabric/tls/server.key - CORE_PEER_TLS_ROOTCERT_FILE=/etc/hyperledger/fabric/tls/ca.crt working_dir: /opt/gopath/src/github.com/hyperledger/fabric/peer command: peer node start peer0.org1.example.com: container_name: peer0.org1.example.com extends: file: peer-base.yaml service: peer-base environment: - CORE_PEER_ID=peer0.org1.example.com - CORE_PEER_ADDRESS=peer0.org1.example.com:7051 - CORE_PEER_CHAINCODELISTENADDRESS=peer0.org1.example.com:7052 - CORE_PEER_GOSSIP_EXTERNALENDPOINT=peer0.org1.example.com:7051 - CORE_PEER_LOCALMSPID=Org1MSP volumes: - /var/run/:/host/var/run/ - ../crypto-config/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/msp:/etc/hyperledger/fabric/msp - ../crypto-config/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls:/etc/hyperledger/fabric/tls ports: - 7051:7051 - 7052:7052 - 7053:7053在Peer的配置中,主要是給Peer分配好各種服務(wù)的地址,以及TLS和MSP信息。
3.3配置CLI
CLI在整個(gè)Fabric網(wǎng)絡(luò)中扮演客戶(hù)端的角色,我們?cè)陂_(kāi)發(fā)測(cè)試的時(shí)候可以用CLI來(lái)代替SDK,執(zhí)行各種SDK能執(zhí)行的操作。CLI會(huì)和Peer相連,把指令發(fā)送給對(duì)應(yīng)的Peer執(zhí)行。CLI的配置在docker-compose-cli.yaml中,我們看看其中的內(nèi)容:
cli: container_name: cli image: hyperledger/fabric-tools tty: true environment: - GOPATH=/opt/gopath - CORE_VM_ENDPOINT=unix:///host/var/run/docker.sock - CORE_LOGGING_LEVEL=DEBUG - CORE_PEER_ID=cli - CORE_PEER_ADDRESS=peer0.org1.example.com:7051 - CORE_PEER_LOCALMSPID=Org1MSP - CORE_PEER_TLS_ENABLED=true - CORE_PEER_TLS_CERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/server.crt - CORE_PEER_TLS_KEY_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/server.key - CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/ca.crt - CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp working_dir: /opt/gopath/src/github.com/hyperledger/fabric/peer command: /bin/bash -c './scripts/script.sh ${CHANNEL_NAME}; sleep $TIMEOUT' volumes: - /var/run/:/host/var/run/ - ../chaincode/go/:/opt/gopath/src/github.com/hyperledger/fabric/examples/chaincode/go - ./crypto-config:/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/ - ./scripts:/opt/gopath/src/github.com/hyperledger/fabric/peer/scripts/ - ./channel-artifacts:/opt/gopath/src/github.com/hyperledger/fabric/peer/channel-artifacts depends_on: - orderer.example.com - peer0.org1.example.com - peer1.org1.example.com - peer0.org2.example.com - peer1.org2.example.com從這里我們可以看到,CLI啟動(dòng)的時(shí)候默認(rèn)連接的是peer0.org1.example.com,并且啟用了TLS。默認(rèn)是以Admin@org1.example.com這個(gè)身份連接到Peer的。CLI啟動(dòng)的時(shí)候,會(huì)去執(zhí)行./scripts/script.sh 腳本,這個(gè)腳本也就是fabric/examples/e2e_cli/scripts/script.sh 這個(gè)腳本,這個(gè)腳本完成了Fabric環(huán)境的初始化和ChainCode的安裝及運(yùn)行,也就是接下來(lái)要講的步驟4和5.在文件映射配置上,我們注意到../chaincode/go/:/opt/gopath/src/github.com/hyperledger/fabric/examples/chaincode/go,也就是說(shuō)我們要安裝的ChainCode都是在fabric/examples/chaincode/go目錄下,以后我們要開(kāi)發(fā)自己的ChainCode,只需要把我們的代碼復(fù)制到該目錄即可。
【注意:請(qǐng)注釋掉cli中command這一行,我們不需要CLI啟動(dòng)的時(shí)候自動(dòng)執(zhí)行腳本,我們?cè)诓襟E4,5要一步步的手動(dòng)執(zhí)行!】
4.初始化Fabric環(huán)境
4.1啟動(dòng)Fabric環(huán)境的容器
我們將整個(gè)Fabric Docker環(huán)境的配置放在docker-compose-cli.yaml后,只需要使用以下命令即可:
docker-compose -f docker-compose-cli.yaml up -d最后這個(gè)-d參數(shù)如果不加,那么當(dāng)前終端就會(huì)一直附加在docker-compose上,而如果加上的話(huà),那么docker容器就在后臺(tái)運(yùn)行。運(yùn)行docker ps命令可以看啟動(dòng)的結(jié)果:
CONTAINER ID??????? IMAGE??????????????????????? COMMAND???????????? CREATED???????????? STATUS????????????? PORTS?????????????????????????????????????????????????????????????????????? NAMES
6f98f57714b5??????? hyperledger/fabric-tools???? "/bin/bash"???????? 8 seconds ago?????? Up 7 seconds??????????????????????????????????????????????????????????????????????????????????? cli
6e7b3fd0e803??????? hyperledger/fabric-peer????? "peer node start"?? 11 seconds ago????? Up 8 seconds??????? 0.0.0.0:10051->7051/tcp, 0.0.0.0:10052->7052/tcp, 0.0.0.0:10053->7053/tcp?? peer1.org2.example.com
9e67abfb982f??????? hyperledger/fabric-orderer?? "orderer"?????????? 11 seconds ago????? Up 8 seconds??????? 0.0.0.0:7050->7050/tcp????????????????????????????????????????????????????? orderer.example.com
908d7fe2a4c7??????? hyperledger/fabric-peer????? "peer node start"?? 11 seconds ago????? Up 9 seconds??????? 0.0.0.0:7051-7053->7051-7053/tcp??????????????????????????????????????????? peer0.org1.example.com
6bb187ac10ec??????? hyperledger/fabric-peer????? "peer node start"?? 11 seconds ago????? Up 10 seconds?????? 0.0.0.0:9051->7051/tcp, 0.0.0.0:9052->7052/tcp, 0.0.0.0:9053->7053/tcp????? peer0.org2.example.com
150baa520ed0??????? hyperledger/fabric-peer????? "peer node start"?? 12 seconds ago????? Up 9 seconds??????? 0.0.0.0:8051->7051/tcp, 0.0.0.0:8052->7052/tcp, 0.0.0.0:8053->7053/tcp????? peer1.org1.example.com
可以看到1Orderer+4Peer+1CLI都啟動(dòng)了。
4.2創(chuàng)建Channel
現(xiàn)在我們要進(jìn)入cli容器內(nèi)部,在里面創(chuàng)建Channel。先用以下命令進(jìn)入CLI內(nèi)部Bash:
docker exec -it cli bash創(chuàng)建Channel的命令是peer channel create,我們前面創(chuàng)建2.4創(chuàng)建Channel的配置區(qū)塊時(shí),指定了Channel的名字是mychannel,那么這里我們必須創(chuàng)建同樣名字的Channel。
ORDERER_CA=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/ordererOrganizations/example.com/orderers/orderer.example.com/msp/tlscacerts/tlsca.example.com-cert.pempeer channel create -o orderer.example.com:7050 -c mychannel -f ./channel-artifacts/channel.tx --tls true --cafile $ORDERER_CA執(zhí)行該命令后,系統(tǒng)會(huì)提示:
2017-08-29 20:36:47.486 UTC [channelCmd] readBlock -> DEBU 020 Received block:0
系統(tǒng)會(huì)在cli內(nèi)部的當(dāng)前目錄創(chuàng)建一個(gè)mychannel.block文件,這個(gè)文件非常重要,接下來(lái)其他節(jié)點(diǎn)要加入這個(gè)Channel就必須使用這個(gè)文件。
4.3各個(gè)Peer加入Channel
前面說(shuō)過(guò),我們CLI默認(rèn)連接的是peer0.org1,那么我們要將這個(gè)Peer加入mychannel就很簡(jiǎn)單,只需要運(yùn)行如下命令:
peer channel join -b mychannel.block系統(tǒng)返回消息:
2017-08-29 20:40:27.053 UTC [channelCmd] executeJoin -> INFO 006 Peer joined the channel!
那么其他幾個(gè)Peer又該怎么加入Channel呢?這里就需要修改CLI的環(huán)境變量,使其指向另外的Peer。比如我們要把peer1.org1加入mychannel,那么命令是:
CORE_PEER_LOCALMSPID="Org1MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp CORE_PEER_ADDRESS=peer1.org1.example.com:7051 peer channel join -b mychannel.block系統(tǒng)會(huì)返回成功加入Channel的消息。
同樣的方法,將peer0.org2加入mychannel:
CORE_PEER_LOCALMSPID="Org2MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/peers/peer0.org2.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/users/Admin@org2.example.com/msp CORE_PEER_ADDRESS=peer0.org2.example.com:7051 peer channel join -b mychannel.block最后把peer1.org2加入mychannel:
CORE_PEER_LOCALMSPID="Org2MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/peers/peer1.org2.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/users/Admin@org2.example.com/msp CORE_PEER_ADDRESS=peer1.org2.example.com:7051 peer channel join -b mychannel.block4.4更新錨節(jié)點(diǎn)
關(guān)于AnchorPeer,我理解的不夠深刻,經(jīng)過(guò)我的測(cè)試,即使沒(méi)有設(shè)置錨節(jié)點(diǎn)的情況下,整個(gè)Fabric網(wǎng)絡(luò)仍然是能正常運(yùn)行的。
對(duì)于Org1來(lái)說(shuō),peer0.org1是錨節(jié)點(diǎn),我們需要連接上它并更新錨節(jié)點(diǎn):
CORE_PEER_LOCALMSPID="Org1MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp CORE_PEER_ADDRESS=peer0.org1.example.com:7051 peer channel update -o orderer.example.com:7050 -c mychannel -f ./channel-artifacts/Org1MSPanchors.tx --tls true --cafile $ORDERER_CA另外對(duì)于Org2,peer0.org2是錨節(jié)點(diǎn),對(duì)應(yīng)的更新代碼是:
CORE_PEER_LOCALMSPID="Org2MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/peers/peer0.org2.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/users/Admin@org2.example.com/msp CORE_PEER_ADDRESS=peer0.org2.example.com:7051 peer channel update -o orderer.example.com:7050 -c mychannel -f ./channel-artifacts/Org2MSPanchors.tx --tls true --cafile $ORDERER_CA5.鏈上代碼的安裝與運(yùn)行
以上,整個(gè)Fabric網(wǎng)絡(luò)和Channel都準(zhǔn)備完畢,接下來(lái)我們來(lái)安裝和運(yùn)行ChainCode。這里仍然以最出名的Example02為例。這個(gè)例子實(shí)現(xiàn)了a,b兩個(gè)賬戶(hù),相互之間可以轉(zhuǎn)賬。
5.1Install ChainCode安裝鏈上代碼
鏈上代碼的安裝需要在各個(gè)相關(guān)的Peer上進(jìn)行,對(duì)于我們現(xiàn)在這種Fabric網(wǎng)絡(luò),如果4個(gè)Peer都想對(duì)Example02進(jìn)行操作,那么就需要安裝4次。
仍然是保持在CLI的命令行下,我們先切換到peer0.org1這個(gè)節(jié)點(diǎn):
CORE_PEER_LOCALMSPID="Org1MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp CORE_PEER_ADDRESS=peer0.org1.example.com:7051使用peer chaincode install命令可以安裝指定的ChainCode并對(duì)其命名:
peer chaincode install -n mycc -v 1.0 -p github.com/hyperledger/fabric/examples/chaincode/go/chaincode_example02安裝的過(guò)程其實(shí)就是對(duì)CLI中指定的代碼進(jìn)行編譯打包,并把打包好的文件發(fā)送到Peer,等待接下來(lái)的實(shí)例化。
其他節(jié)點(diǎn)由于暫時(shí)還沒(méi)使用到,我們可以先不安裝,等到了步驟5.4的時(shí)候再安裝。
5.2Instantiate ChainCode實(shí)例化鏈上代碼
實(shí)例化鏈上代碼主要是在Peer所在的機(jī)器上對(duì)前面安裝好的鏈上代碼進(jìn)行包裝,生成對(duì)應(yīng)Channel的Docker鏡像和Docker容器。并且在實(shí)例化時(shí)我們可以指定背書(shū)策略。我們運(yùn)行以下命令完成實(shí)例化:
peer chaincode instantiate -o orderer.example.com:7050 --tls true --cafile $ORDERER_CA -C mychannel -n mycc -v 1.0 -c '{"Args":["init","a","100","b","200"]}' -P "OR ('Org1MSP.member','Org2MSP.member')"如果我們新開(kāi)一個(gè)Ubuntu終端,去查看peer0.org1上的日志,那么就可以知道整個(gè)實(shí)例化的過(guò)程到底干了什么:
docker logs -f peer0.org1.example.com主要幾行重要的日志:
2017-08-29 21:14:12.290 UTC [chaincode-platform] generateDockerfile -> DEBU 3fd FROM hyperledger/fabric-baseos:x86_64-0.3.1 ADD binpackage.tar /usr/local/bin LABEL org.hyperledger.fabric.chaincode.id.name="mycc" \ org.hyperledger.fabric.chaincode.id.version="1.0" \ org.hyperledger.fabric.chaincode.type="GOLANG" \ org.hyperledger.fabric.version="1.0.0" \ org.hyperledger.fabric.base.version="0.3.1" ENV CORE_CHAINCODE_BUILDLEVEL=1.0.0 ENV CORE_PEER_TLS_ROOTCERT_FILE=/etc/hyperledger/fabric/peer.crt COPY peer.crt /etc/hyperledger/fabric/peer.crt 2017-08-29 21:14:12.297 UTC [util] DockerBuild -> DEBU 3fe Attempting build with image hyperledger/fabric-ccenv:x86_64-1.0.0 2017-08-29 21:14:48.907 UTC [dockercontroller] deployImage -> DEBU 3ff Created image: dev-peer0.org1.example.com-mycc-1.0 2017-08-29 21:14:48.908 UTC [dockercontroller] Start -> DEBU 400 start-recreated image successfully 2017-08-29 21:14:48.908 UTC [dockercontroller] createContainer -> DEBU 401 Create container: dev-peer0.org1.example.com-mycc-1.0接下來(lái)的日志就是各種初始化,驗(yàn)證,寫(xiě)賬本之類(lèi)的。總之完畢后,我們回到Ubuntu終端,使用docker ps可以看到有新的容器正在運(yùn)行:
CONTAINER ID??????? IMAGE???????????????????????????????? COMMAND????????????????? CREATED????????????? STATUS????????????? PORTS?????????????????????????????????????????????????????????????????????? NAMES
07791d4a99b7??????? dev-peer0.org1.example.com-mycc-1.0?? "chaincode -peer.a..."?? About a minute ago?? Up About a minute?????????????????????????????????????????????????????????????????????????????? dev-peer0.org1.example.com-mycc-1.0
6f98f57714b5??????? hyperledger/fabric-tools????????????? "/bin/bash"????????????? About an hour ago??? Up About an hour??????????????????????????????????????????????????????????????????????????????? cli
6e7b3fd0e803??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago??? Up About an hour??? 0.0.0.0:10051->7051/tcp, 0.0.0.0:10052->7052/tcp, 0.0.0.0:10053->7053/tcp?? peer1.org2.example.com
9e67abfb982f??????? hyperledger/fabric-orderer??????????? "orderer"??????????????? About an hour ago??? Up About an hour??? 0.0.0.0:7050->7050/tcp????????????????????????????????????????????????????? orderer.example.com
908d7fe2a4c7??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago??? Up About an hour??? 0.0.0.0:7051-7053->7051-7053/tcp??????????????????????????????????????????? peer0.org1.example.com
6bb187ac10ec??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago??? Up About an hour??? 0.0.0.0:9051->7051/tcp, 0.0.0.0:9052->7052/tcp, 0.0.0.0:9053->7053/tcp????? peer0.org2.example.com
150baa520ed0??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago??? Up About an hour??? 0.0.0.0:8051->7051/tcp, 0.0.0.0:8052->7052/tcp, 0.0.0.0:8053->7053/tcp????? peer1.org1.example.com
5.3在一個(gè)Peer上查詢(xún)并發(fā)起交易
現(xiàn)在鏈上代碼的實(shí)例也有了,并且在實(shí)例化的時(shí)候指定了a賬戶(hù)100,b賬戶(hù)200,我們可以試著調(diào)用ChainCode的查詢(xún)代碼,驗(yàn)證一下,在cli容器內(nèi)執(zhí)行:
peer chaincode query -C mychannel -n mycc -c '{"Args":["query","a"]}'返回結(jié)果:Query Result: 100
接下來(lái)我們可以試著把a(bǔ)賬戶(hù)的10元轉(zhuǎn)給b。對(duì)應(yīng)的代碼:
peer chaincode invoke -o orderer.example.com:7050 --tls true --cafile $ORDERER_CA -C mychannel -n mycc -c '{"Args":["invoke","a","b","10"]}'5.4在另一個(gè)節(jié)點(diǎn)上查詢(xún)交易
前面的操作都是在org1下面做的,那么處于同一個(gè)區(qū)塊鏈(同一個(gè)Channel下)的org2,是否會(huì)看org1的更改呢?我們?cè)囍opeer0.org2安裝鏈上代碼:
CORE_PEER_LOCALMSPID="Org2MSP" CORE_PEER_TLS_ROOTCERT_FILE=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/peers/peer0.org2.example.com/tls/ca.crt CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/peerOrganizations/org2.example.com/users/Admin@org2.example.com/msp CORE_PEER_ADDRESS=peer0.org2.example.com:7051 peer chaincode install -n mycc -v 1.0 -p github.com/hyperledger/fabric/examples/chaincode/go/chaincode_example02由于mycc已經(jīng)在前面org1的時(shí)候?qū)嵗?#xff0c;也就是說(shuō)對(duì)應(yīng)的區(qū)塊已經(jīng)生成了,所以在org2不能再次初始化。我們直接運(yùn)行查詢(xún)命令:
peer chaincode query -C mychannel -n mycc -c '{"Args":["query","a"]}'這個(gè)時(shí)候我們發(fā)現(xiàn)運(yùn)行該命令后要等很久(我這里花了40秒)才返回結(jié)果:
Query Result: 90
這是因?yàn)閜eer0.org2也需要生成Docker鏡像,創(chuàng)建對(duì)應(yīng)的容器,才能通過(guò)容器返回結(jié)果。我們回到Ubuntu終端,執(zhí)行docker ps,可以看到又多了一個(gè)容器:
CONTAINER ID??????? IMAGE???????????????????????????????? COMMAND????????????????? CREATED???????????? STATUS????????????? PORTS?????????????????????????????????????????????????????????????????????? NAMES
3e37aba50189??????? dev-peer0.org2.example.com-mycc-1.0?? "chaincode -peer.a..."?? 2 minutes ago?????? Up 2 minutes??????????????????????????????????????????????????????????????????????????????????? dev-peer0.org2.example.com-mycc-1.0
07791d4a99b7??????? dev-peer0.org1.example.com-mycc-1.0?? "chaincode -peer.a..."?? 21 minutes ago????? Up 21 minutes?????????????????????????????????????????????????????????????????????????????????? dev-peer0.org1.example.com-mycc-1.0
6f98f57714b5??????? hyperledger/fabric-tools????????????? "/bin/bash"????????????? About an hour ago?? Up About an hour??????????????????????????????????????????????????????????????????????????????? cli
6e7b3fd0e803??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago?? Up About an hour??? 0.0.0.0:10051->7051/tcp, 0.0.0.0:10052->7052/tcp, 0.0.0.0:10053->7053/tcp?? peer1.org2.example.com
9e67abfb982f??????? hyperledger/fabric-orderer??????????? "orderer"??????????????? About an hour ago?? Up About an hour??? 0.0.0.0:7050->7050/tcp????????????????????????????????????????????????????? orderer.example.com
908d7fe2a4c7??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago?? Up About an hour??? 0.0.0.0:7051-7053->7051-7053/tcp??????????????????????????????????????????? peer0.org1.example.com
6bb187ac10ec??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago?? Up About an hour??? 0.0.0.0:9051->7051/tcp, 0.0.0.0:9052->7052/tcp, 0.0.0.0:9053->7053/tcp????? peer0.org2.example.com
150baa520ed0??????? hyperledger/fabric-peer?????????????? "peer node start"??????? About an hour ago?? Up About an hour??? 0.0.0.0:8051->7051/tcp, 0.0.0.0:8052->7052/tcp, 0.0.0.0:8053->7053/tcp????? peer1.org1.example.com
總結(jié)
通過(guò)以上的分解,希望大家對(duì)Fabric環(huán)境的創(chuàng)建有了更深入的理解。我這里的示例仍然是官方的示例,并沒(méi)有什么太新的東西。只要把這每一步搞清楚,那么接下來(lái)我們?cè)谏a(chǎn)環(huán)境創(chuàng)建更多的Org,創(chuàng)建大量的Channel,執(zhí)行各種ChainCode都是如出一轍。
轉(zhuǎn)自:http://www.cnblogs.com/studyzy/p/7451276.html
轉(zhuǎn)載于:https://www.cnblogs.com/zhangmingcheng/p/8178101.html
總結(jié)
以上是生活随笔為你收集整理的深入理解Fabric环境搭建的详细过程(转)的全部?jī)?nèi)容,希望文章能夠幫你解決所遇到的問(wèn)題。
- 上一篇: lodash源码分析之Hash缓存
- 下一篇: 2016级算法第六次上机-A.Bambo